topic help with ACL in ExtremeSwitching (EXOS/Switch Engine) https://community.extremenetworks.com/t5/extremeswitching-exos-switch/help-with-acl/m-p/16412#M337 Hi! I want to know if the next ACL can be simplified<BR /> <BR /> entry VLAN_Admin_snmp {<BR /> if {<BR /> source-address 10.170.70.0/24;<BR /> protocol udp;<BR /> destination-port 161;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry VLAN_Admin_snmptrap {<BR /> if {<BR /> source-address 10.170.70.0/24;<BR /> protocol udp;<BR /> destination-port 162;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry VLAN_AdminCarso_snmptrap {<BR /> if {<BR /> source-address 172.30.110.200/29;<BR /> protocol udp;<BR /> destination-port 161;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry VLAN_AdminCarso_snmptrap {<BR /> if {<BR /> source-address 172.30.110.200/29;<BR /> protocol udp;<BR /> destination-port 162;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry VLAN_AdminSERMET_snmptrap {<BR /> if {<BR /> source-address 10.170.95.192/28;<BR /> protocol udp;<BR /> destination-port 161;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry VLAN_AdminSERMET_snmptrap {<BR /> if {<BR /> source-address 10.170.95.192/28;<BR /> protocol udp;<BR /> destination-port 162;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry Block_SNMP {<BR /> if match all {<BR /> source-address 0.0.0.0/0;<BR /> protocol udp;<BR /> destination-port 161;<BR /> } then {<BR /> deny;<BR /> }<BR /> }<BR /> entry block_SNMPTRAPS {<BR /> if {<BR /> source-address 0.0.0.0/0;<BR /> protocol udp;<BR /> destination-port 162;<BR /> } then {<BR /> deny;<BR /> }<BR /> } Fri, 17 Jun 2016 19:25:00 GMT Daniel_Valera1 2016-06-17T19:25:00Z help with ACL https://community.extremenetworks.com/t5/extremeswitching-exos-switch/help-with-acl/m-p/16412#M337 Hi! I want to know if the next ACL can be simplified<BR /> <BR /> entry VLAN_Admin_snmp {<BR /> if {<BR /> source-address 10.170.70.0/24;<BR /> protocol udp;<BR /> destination-port 161;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry VLAN_Admin_snmptrap {<BR /> if {<BR /> source-address 10.170.70.0/24;<BR /> protocol udp;<BR /> destination-port 162;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry VLAN_AdminCarso_snmptrap {<BR /> if {<BR /> source-address 172.30.110.200/29;<BR /> protocol udp;<BR /> destination-port 161;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry VLAN_AdminCarso_snmptrap {<BR /> if {<BR /> source-address 172.30.110.200/29;<BR /> protocol udp;<BR /> destination-port 162;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry VLAN_AdminSERMET_snmptrap {<BR /> if {<BR /> source-address 10.170.95.192/28;<BR /> protocol udp;<BR /> destination-port 161;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry VLAN_AdminSERMET_snmptrap {<BR /> if {<BR /> source-address 10.170.95.192/28;<BR /> protocol udp;<BR /> destination-port 162;<BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> entry Block_SNMP {<BR /> if match all {<BR /> source-address 0.0.0.0/0;<BR /> protocol udp;<BR /> destination-port 161;<BR /> } then {<BR /> deny;<BR /> }<BR /> }<BR /> entry block_SNMPTRAPS {<BR /> if {<BR /> source-address 0.0.0.0/0;<BR /> protocol udp;<BR /> destination-port 162;<BR /> } then {<BR /> deny;<BR /> }<BR /> } Fri, 17 Jun 2016 19:25:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/help-with-acl/m-p/16412#M337 Daniel_Valera1 2016-06-17T19:25:00Z RE: help with ACL https://community.extremenetworks.com/t5/extremeswitching-exos-switch/help-with-acl/m-p/16413#M338 I would use 'port range' in the 'destination-port' statements. <BR /> <BR /> entry VLAN_Admin_snmp_trap {<BR /> if {<BR /> source-address 10.170.70.0/24;<BR /> protocol udp;<BR /> <B>destination-port 161 - 162;</B><BR /> } then {<BR /> permit;<BR /> }<BR /> }<BR /> Fri, 17 Jun 2016 22:01:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/help-with-acl/m-p/16413#M338 Kevin_Kim 2016-06-17T22:01:00Z RE: help with ACL https://community.extremenetworks.com/t5/extremeswitching-exos-switch/help-with-acl/m-p/16414#M339 Thanks Kevin... regards Fri, 17 Jun 2016 22:01:00 GMT https://community.extremenetworks.com/t5/extremeswitching-exos-switch/help-with-acl/m-p/16414#M339 Daniel_Valera1 2016-06-17T22:01:00Z